de5f208ab702f7a1700773f46399d167 | Triage

Sharing

General

Target

de5f208ab702f7a1700773f46399d167
Size

120KB
MD5

de5f208ab702f7a1700773f46399d167
SHA1

8f7cfc096ddea76b41cfa14fc26e69497cd09cff
SHA256

bad5f07fc6f4610fca92310ef9b47a1ac38ade01d24251fcab9855a05bd89d07
SHA512

9e27fba1cdd85cd99d54c7b830bac14a99fcffdf00fde6bf4f7494a2a9dba3f993e02bd8a5108dd6b2985d27915777c1e6827482b53c64c19b849fce5e0a2f91
SSDEEP

1536:rYBsVMnHjqY7B2SlU6UsQWLJYlSDpGFDHcZ1LAPe4KTybRRtimq55jFiwW:esVMnDqYN2IlUTWLkipGF7KL7OpD4kw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de5f208ab702f7a1700773f46399d167

Files

de5f208ab702f7a1700773f46399d167
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ